Unsecurity Episode 261: CMMC Delay and Compliance Costs with Eric Vollbrecht and Nathan Austin
Analysts investigate attack surfaces and defenses concerning Unsecurity Episode 261: CMMC Delay and Compliance Costs with Eric Vollbrecht and Nathan Austin.
Summary
CMMC Phase Two Pause
Hosts Brad and Megan Larkins interview Mytech consultants Eric Vollbrecht and Nathan Austin on the Unsecurity podcast. Eric focuses on CMMC certification guidance; Nate coordinates consulting, AI, and sales alignment at Mytech.
What the 60-Day Pause Means
They discuss the Pentagon putting CMMC phase two on a 60-day pause while mid-July review continues. Guests clarify this delays third-party C3PAO attestation deadlines that had been set for November, not the underlying level-two requirements. Prime contractors and subcontractors may still need self-attestation and full level-two controls.
Compliance Costs and Enforcement Risk
Mytech emphasizes transparency about assessment economics: third-party assessor fees plus preparation often costing roughly twice the assessor price. They cite a firm that falsely self-attested, scored poorly on audit, and paid over $500,000 in consequences. Speakers argue requirements remain despite the pause and fraud enforcement continues.
Related talks
FRSecure·1 hr 11 min
Analysts investigate attack surfaces and defenses concerning UNSECURITY Episode 118: Compliance vs. Security, CMMC, Approaching Security the Right Way.
The Linux Foundation·11 min
Seoyeon Lee
Demonstrates A 10-Year Retrospective on Why enterprise Job Isnt Just About Compliance and Cost Savings and evaluates key implications for security practitioners.
The Linux Foundation·15 min
Seoyeon Lee
Demonstrates A 10-Year Retrospective on Why enterprise Job Isnt Just About Compliance and Cost Savings and evaluates key implications for security practitioners.